Adds support to SecAuditLogParts

This commit is contained in:
Felipe Zimmerle 2015-07-10 19:05:46 -03:00
parent 5e33a1a3c4
commit 0c98bdc80b
8 changed files with 76 additions and 63 deletions

View File

@ -695,6 +695,7 @@ std::string Assay::to_json(int parts) {
std::string ts = ascTime(&timeStamp).c_str(); std::string ts = ascTime(&timeStamp).c_str();
std::string uniqueId = UniqueId::uniqueId(); std::string uniqueId = UniqueId::uniqueId();
parts = 0;
g = yajl_gen_alloc(NULL); g = yajl_gen_alloc(NULL);
if (g == NULL) { if (g == NULL) {
return ""; return "";
@ -709,6 +710,7 @@ std::string Assay::to_json(int parts) {
strlen("transaction")); strlen("transaction"));
yajl_gen_map_open(g); yajl_gen_map_open(g);
/* Part: A (header mandatory) */
LOGFY_ADD("client_ip", this->m_clientIpAddress); LOGFY_ADD("client_ip", this->m_clientIpAddress);
LOGFY_ADD("time_stamp", ts.c_str()); LOGFY_ADD("time_stamp", ts.c_str());
LOGFY_ADD("server_id", uniqueId.c_str()); LOGFY_ADD("server_id", uniqueId.c_str());
@ -725,9 +727,13 @@ std::string Assay::to_json(int parts) {
LOGFY_ADD("protocol", m_protocol); LOGFY_ADD("protocol", m_protocol);
LOGFY_ADD_INT("http_version", m_httpVersion); LOGFY_ADD_INT("http_version", m_httpVersion);
LOGFY_ADD("uri", this->m_uri); LOGFY_ADD("uri", this->m_uri);
if (parts & AuditLog::CAuditLogPart) {
LOGFY_ADD("body", this->m_requestBody.str().c_str()); LOGFY_ADD("body", this->m_requestBody.str().c_str());
}
/* request headers */ /* request headers */
if (parts & AuditLog::BAuditLogPart) {
yajl_gen_string(g, reinterpret_cast<const unsigned char*>("headers"), yajl_gen_string(g, reinterpret_cast<const unsigned char*>("headers"),
strlen("headers")); strlen("headers"));
yajl_gen_map_open(g); yajl_gen_map_open(g);
@ -746,6 +752,8 @@ std::string Assay::to_json(int parts) {
/* end: request headers */ /* end: request headers */
yajl_gen_map_close(g); yajl_gen_map_close(g);
}
/* end: request */ /* end: request */
yajl_gen_map_close(g); yajl_gen_map_close(g);
@ -754,10 +762,13 @@ std::string Assay::to_json(int parts) {
strlen("response")); strlen("response"));
yajl_gen_map_open(g); yajl_gen_map_open(g);
if (parts & AuditLog::GAuditLogPart) {
LOGFY_ADD("body", this->m_responseBody.str().c_str()); LOGFY_ADD("body", this->m_responseBody.str().c_str());
}
LOGFY_ADD_NUM("http_code", httpCodeReturned); LOGFY_ADD_NUM("http_code", httpCodeReturned);
/* response headers */ /* response headers */
if (parts & AuditLog::FAuditLogPart) {
yajl_gen_string(g, reinterpret_cast<const unsigned char*>("headers"), yajl_gen_string(g, reinterpret_cast<const unsigned char*>("headers"),
strlen("headers")); strlen("headers"));
yajl_gen_map_open(g); yajl_gen_map_open(g);
@ -775,10 +786,12 @@ std::string Assay::to_json(int parts) {
} }
/* end: response headers */ /* end: response headers */
yajl_gen_map_close(g); yajl_gen_map_close(g);
}
/* end: response */ /* end: response */
yajl_gen_map_close(g); yajl_gen_map_close(g);
/* producer */ /* producer */
if (parts & AuditLog::HAuditLogPart) {
yajl_gen_string(g, reinterpret_cast<const unsigned char*>("producer"), yajl_gen_string(g, reinterpret_cast<const unsigned char*>("producer"),
strlen("producer")); strlen("producer"));
yajl_gen_map_open(g); yajl_gen_map_open(g);
@ -808,7 +821,7 @@ std::string Assay::to_json(int parts) {
/* end: producer */ /* end: producer */
yajl_gen_map_close(g); yajl_gen_map_close(g);
}
/* end: transaction */ /* end: transaction */
yajl_gen_map_close(g); yajl_gen_map_close(g);

View File

@ -148,7 +148,7 @@ bool AuditLog::saveIfRelevant(Assay *assay) {
return true; return true;
} }
m_writer->write(assay); m_writer->write(assay, m_parts);
return true; return true;
} }

View File

@ -33,7 +33,7 @@ std::string AuditLogWriter::file_name(const std::string& unique_id) {
* Temporary print the log into the std::cout to debug purposes. * Temporary print the log into the std::cout to debug purposes.
* *
*/ */
bool AuditLogWriter::write(Assay *assay) { bool AuditLogWriter::write(Assay *assay, int parts) {
std::cout << assay->to_json(0) << std::endl; std::cout << assay->to_json(0) << std::endl;
return true; return true;
} }

View File

@ -36,7 +36,7 @@ class AuditLogWriter {
virtual bool close() { return true; } virtual bool close() { return true; }
virtual bool init() { return true; } virtual bool init() { return true; }
virtual bool write(Assay *assay); virtual bool write(Assay *assay, int parts);
std::string file_name(const std::string& unique_id); std::string file_name(const std::string& unique_id);

View File

@ -74,10 +74,10 @@ bool AuditLogWriterParallel::close() {
} }
bool AuditLogWriterParallel::write(Assay *assay) { bool AuditLogWriterParallel::write(Assay *assay, int parts) {
FILE *fp; FILE *fp;
int fd; int fd;
std::string log = assay->to_json(0); std::string log = assay->to_json(parts);
std::string fileName = logFilePath(&assay->timeStamp, std::string fileName = logFilePath(&assay->timeStamp,
YearMonthDayDirectory | YearMonthDayAndTimeDirectory YearMonthDayDirectory | YearMonthDayAndTimeDirectory
| YearMonthDayAndTimeFileName); | YearMonthDayAndTimeFileName);

View File

@ -33,7 +33,7 @@ class AuditLogWriterParallel : public AuditLogWriter {
bool init() override; bool init() override;
bool close() override; bool close() override;
bool write(Assay *assay) override; bool write(Assay *assay, int parts) override;
/** /**
* *

View File

@ -30,7 +30,7 @@ bool AuditLogWriterSerial::close() {
} }
bool AuditLogWriterSerial::write(Assay *assay) { bool AuditLogWriterSerial::write(Assay *assay, int parts) {
return true; return true;
} }

View File

@ -37,7 +37,7 @@ class AuditLogWriterSerial : public AuditLogWriter {
bool init() override; bool init() override;
bool close() override; bool close() override;
bool write(Assay *assay) override; bool write(Assay *assay, int parts) override;
}; };
} // namespace ModSecurity } // namespace ModSecurity